{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:36.915Z","products":["ictinnovations"],"actNowTotal":0,"results":[{"query":"ictinnovations","matched":1,"actNow":0,"events":[{"id":"early-cve-2025-2611","url":"https://securitythreatpulse.com/events/early-cve-2025-2611","title":"ICT Innovations ICTBroadcast: attackers can run their own code","verdict":"watch","verdictReason":"Attacks are reported but not confirmed by an authoritative source, and the vulnerability is more than 90 days old.","tier":null,"rankScore":4,"rankWhy":["Exploitation is reported.","Ready-made attack tools are public.","The first report is 7 days old."],"rulesVersion":"v3","ladder":{"talk":"none","damage":"none","attempts":"reported","exposure":"none","exploited":"reported"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2025-2611"],"vendor":"ICT Innovations","product":"ICTBroadcast","affectedProducts":[{"kind":"direct","slug":"ictinnovations/ictbroadcast","vendor":"ICT Innovations","product":"ICTBroadcast","evidence":["cna","cpe"],"vendorKey":"ictinnovations","productKey":"ictbroadcast"}],"category":{"id":"other","label":"Other software","why":"Software we have not put in a category yet. Your IT team or provider will know whether you run it.","doThis":"Find out if you use it. If you do, apply the vendor's fix."},"summary":"The ICTBroadcast application unsafely passes session cookie data to shell processing, allowing an attacker to inject shell commands into a session cookie that get executed on the server. This results in unauthenticated remote code execution in the session handling. Versions 7.4 and below are known to be vulnerable.","cvss":9.3,"epss":0.08378,"exploitMaturity":"weaponized","kevListed":false,"kevDateAdded":null,"kevDueDate":null,"firstSeenAt":"2026-11-04T14:05:23.000Z","updatedAt":"2026-11-11T00:00:06.173Z","newestEvidenceAt":"2026-11-05T05:30:59.334Z"}]}]}